SHELL提取日志的問題

yankai0403

大家好:
      我先給大家看段日志內(nèi)容:
[root@localhost boot]# tail -n 20 /var/log/messages
Sep  3 19:52:06 localhost last message repeated 4 times
Sep  3 19:55:39 localhost last message repeated 4 times
Sep  3 19:57:06 localhost squid: Could not determine fully qualified hostname.  Please set 'visible_hostname'
Sep  3 19:57:50 localhost squid: Could not determine fully qualified hostname.  Please set 'visible_hostname'
Sep  3 19:59:53 localhost squid[30131]: Squid Parent: child process 30133 started
Sep  3 19:59:53 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:53 localhost squid[30131]: Squid Parent: child process 30133 exited due to signal 6
Sep  3 19:59:56 localhost squid[30131]: Squid Parent: child process 30135 started
Sep  3 19:59:56 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:56 localhost squid[30131]: Squid Parent: child process 30135 exited due to signal 6
Sep  3 19:59:59 localhost squid[30131]: Squid Parent: child process 30137 started
Sep  3 19:59:59 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:59 localhost squid[30131]: Squid Parent: child process 30137 exited due to signal 6
Sep  3 20:00:02 localhost squid[30131]: Squid Parent: child process 30158 started
Sep  3 20:00:03 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 20:00:03 localhost squid[30131]: Squid Parent: child process 30158 exited due to signal 6
Sep  3 20:00:04 localhost squid[30160]: Squid Parent: child process 30162 started
Sep  3 20:00:06 localhost squid[30131]: Squid Parent: child process 30166 started
Sep  3 20:00:06 localhost squid[30131]: Squid Parent: child process 30166 exited with status 1
Sep  3 20:00:06 localhost squid[30131]: Exiting due to repeated, frequent failures
       我想用SHELL實(shí)現(xiàn)的功能是:用SHELL提取固定時間內(nèi)的的日志記錄行,并進(jìn)行輸出,最好用AWK實(shí)現(xiàn).例如:我想提取19:55:39至20:00:02這段時間的日志,那么腳本的輸出就應(yīng)該是:
Sep  3 19:55:39 localhost last message repeated 4 times
Sep  3 19:57:06 localhost squid: Could not determine fully qualified hostname.  Please set 'visible_hostname'
Sep  3 19:57:50 localhost squid: Could not determine fully qualified hostname.  Please set 'visible_hostname'
Sep  3 19:59:53 localhost squid[30131]: Squid Parent: child process 30133 started
Sep  3 19:59:53 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:53 localhost squid[30131]: Squid Parent: child process 30133 exited due to signal 6
Sep  3 19:59:56 localhost squid[30131]: Squid Parent: child process 30135 started
Sep  3 19:59:56 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:56 localhost squid[30131]: Squid Parent: child process 30135 exited due to signal 6
Sep  3 19:59:59 localhost squid[30131]: Squid Parent: child process 30137 started
Sep  3 19:59:59 localhost (squid): ipcache_init: DNS name lookup tests failed.
Sep  3 19:59:59 localhost squid[30131]: Squid Parent: child process 30137 exited due to signal 6
Sep  3 20:00:02 localhost squid[30131]: Squid Parent: child process 30158 started
       望高手捧場!謝謝!!!

ly5066113

awk '$1=="Sep" && $2 ==3 && $3>="19:55:39" && $3<="20:00:02"' /var/log/messages

yankai0403

NB,哈哈
謝謝大哥了!!

MYSQLER

awk真不錯。開始學(xué)awk